Lucene search
+L

56 matches found

RedhatCVE
RedhatCVE
•added 2026/04/20 7:23 p.m.•16 views

CVE-2026-6559

A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. Upgrading the affected component is recommended...

5.3CVSS4.5AI score0.00449EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/19 6:31 a.m.•16 views

EUVD-2026-23682

A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. Upgrading the affected component is recommended...

5.3CVSS4.5AI score0.00449EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/04/19 5:15 a.m.•10 views

CVE-2026-6559

A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. Upgrading the affected component is recommended...

5.3CVSS4.5AI score0.00449EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2026/04/19 5:15 a.m.•52 views

CVE-2026-6559 Wavlink WL-WN579A3 login.cgi sub_401F80 cross site scripting

A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. Upgrading the affected component is recommended...

5.3CVSS0.00449EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/19 12:00 a.m.•0 views

CVE-2026-6559: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. Upgrading the affected component is recommended...

5.3CVSS4.2AI score0.00449EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/19 12:00 a.m.•43 views

PT-2026-33617

A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub 401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. Upgrading the affected component is recommended...

5.3CVSS4.5AI score0.00449EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•12 views

The vulnerability in the script/cgi-bin/wireless.cgi of the Wavlink WL-WN579A3 router software, which allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/wireless.cgi script of the Wavlink WL-WN579A3 router software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

10CVSS7.5AI score0.03568EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•2 views

CVE-2026-4163: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in Wavlink WL-WN579A3 220323. This issue affects the function SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The exploit...

10CVSS5.5AI score0.03568EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/16 12:00 a.m.•15 views

WAVLINK WL-WN579A3 命令注入漏洞

WAVLINK WL-WN579A3 is a high-performance dual-band wireless network card developed by WAVLINK Corporation. The WAVLINK WL-WN579A3 220323 version has a command injection vulnerability. This vulnerability arises from improper handling of parameters for the function setName/GuestWifi in the...

10CVSS7.3AI score0.03568EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/03/14 10:32 p.m.•3 views

CVE-2026-4163 Wavlink WL-WN579A3 POST Request wireless.cgi GuestWifi command injection

A vulnerability was detected in Wavlink WL-WN579A3 220323. This issue affects the function SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The exploit...

10CVSS5.7AI score0.03568EPSS
SaveExploits0References7
CVE
CVE
•added 2026/03/14 10:32 p.m.•41 views

CVE-2026-4163

CVE-2026-4163 – Wavlink WL-WN579A3 : A command-injection vulnerability affects the POST Request Handler in /cgi-bin/wireless.cgi (SetName/GuestWifi). Manipulating inputs can trigger remote code execution with high impact to confidentiality, integrity, and availability. Exploit maturity is shown a...

10CVSS7.1AI score0.03568EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2026/02/20 12:00 a.m.•11 views

The vulnerability of the /cgi-bin/login.cgi file in the microprogramming software for Wavlink routers WL-WN579A3 allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/login.cgi file in the microprogramming software for Wavlink WL-WN579A3 is related to the lack of measures taken to neutralize data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

10CVSS6.1AI score0.08477EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
•added 2026/02/17 7:28 a.m.•20 views

CVE-2026-2529

A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteMac of the file /cgi-bin/wireless.cgi. The manipulation of the argument deletelist results in command injection. The attack can be executed remotely. The vendor was contacted ear...

9.8CVSS5.4AI score0.08477EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/17 2:44 a.m.•26 views

CVE-2026-2527

A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219. Affected is an unknown function of the file /cgi-bin/login.cgi. Executing a manipulation of the argument key can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be...

9.8CVSS5.4AI score0.08477EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/02/16 6:31 a.m.•13 views

EUVD-2026-6131

A weakness has been identified in Wavlink WL-WN579A3 up to 20210219. This affects the function AddMac of the file /cgi-bin/wireless.cgi. This manipulation of the argument macAddr causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to th...

8.8CVSS5.4AI score0.08219EPSS
SaveExploits1References5
OSV
OSV
•added 2026/02/16 4:15 a.m.•21 views

CVE-2026-2530

A weakness has been identified in Wavlink WL-WN579A3 up to 20210219. This affects the function AddMac of the file /cgi-bin/wireless.cgi. This manipulation of the argument macAddr causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to th...

8.8CVSS5.5AI score0.08219EPSS
SaveExploits1References4
NVD
NVD
•added 2026/02/16 4:15 a.m.•22 views

CVE-2026-2530

A weakness has been identified in Wavlink WL-WN579A3 up to 20210219. This affects the function AddMac of the file /cgi-bin/wireless.cgi. This manipulation of the argument macAddr causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to th...

8.8CVSS0.08219EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/02/16 3:30 a.m.•14 views

EUVD-2026-6133

A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteMac of the file /cgi-bin/wireless.cgi. The manipulation of the argument deletelist results in command injection. The attack can be executed remotely. The vendor was contacted ear...

9.8CVSS5.4AI score0.08477EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/02/16 3:30 a.m.•20 views

EUVD-2026-6132

A vulnerability was identified in Wavlink WL-WN579A3 up to 20210219. Affected by this vulnerability is the function DeleteMaclist of the file /cgi-bin/wireless.cgi. The manipulation of the argument deletelist leads to command injection. Remote exploitation of the attack is possible. The exploit i...

9.8CVSS5.4AI score0.08244EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/02/16 2:32 a.m.•12 views

CVE-2026-2530

A weakness has been identified in Wavlink WL-WN579A3 up to 20210219. This affects the function AddMac of the file /cgi-bin/wireless.cgi. This manipulation of the argument macAddr causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to th...

6.5CVSS5.4AI score0.08219EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder